Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: QdYCmXE0ar4zoLcPDdGQRs1IEg2jRlUIEEUMc3wIkT8=
Subject key identifier: CE:BC:B1:7B:55:BD:B4:B9:87:89:4C:95:FA:44:A0:D8:16:16:A2:48
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 0197B7EACC94870A68FD6F20CF19DAD794D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:47 +0000
Manifest this update: Sat 28 Jun 2025 19:01:47 +0000
Manifest next update: Sun 29 Jun 2025 19:01:47 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: H3M4Na7/zI5DCmnZtxuhkcJdjly1WoAXheV74BuGikc=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:cc:94:87:0a:68:fd:6f:20:cf:19:da:d7:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jun 28 19:01:47 2025 GMT
Not After : Jun 29 19:01:47 2025 GMT
Subject: CN=cebcb17b55bdb4b987894c95fa44a0d81616a248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:d2:3f:35:c8:2a:ee:7b:62:01:34:94:26:
c0:b4:e3:70:1f:b1:a3:e8:0f:fe:1a:df:e5:09:d6:
19:75:f2:05:7d:29:80:f3:6d:eb:11:a3:63:7b:7a:
c9:2b:8f:95:c4:96:5b:69:93:fb:ad:bb:4c:d4:e8:
62:08:83:e2:9f:6c:c7:80:b2:82:f4:51:e4:a0:89:
7e:00:d7:15:8c:9a:23:bc:54:9e:a4:2d:10:c8:88:
dc:15:c1:c1:62:94:e6:59:8e:95:f1:0f:4a:2a:9c:
48:1b:a0:d7:94:a5:20:6f:8e:85:75:78:ea:84:0e:
05:40:3b:f9:19:dd:3d:3b:cd:a6:d4:a0:7a:10:64:
23:3a:97:ea:10:8d:07:de:a0:e7:33:d4:ad:1d:48:
49:32:d9:9a:41:81:f4:df:6a:b1:2f:02:26:38:e0:
55:2e:c0:a8:c5:36:b2:dc:1e:39:6f:a3:7a:85:2a:
4e:3d:0e:33:4c:32:4a:7f:da:d9:52:af:3a:cf:df:
92:8b:4f:0f:61:46:21:a2:1a:d7:3b:26:4d:da:14:
b1:48:d0:fb:6f:da:8c:0e:f3:5e:46:0b:23:a2:e6:
6a:d4:5a:e4:70:bd:a0:81:6b:13:45:be:b2:7d:81:
46:3b:bb:9b:95:5d:30:c5:18:39:51:c2:58:1d:7f:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:B1:7B:55:BD:B4:B9:87:89:4C:95:FA:44:A0:D8:16:16:A2:48
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:4c:5b:be:53:24:1b:3a:09:12:24:74:fb:08:90:5d:a1:
47:54:13:88:66:10:1a:6c:a6:5d:7d:e7:58:c3:73:d6:57:1a:
2c:13:dd:93:7b:94:85:21:52:5f:75:4b:a7:f6:b8:68:35:07:
79:40:0b:1c:78:4d:86:e3:f9:1f:64:6b:dc:69:a1:17:a7:71:
93:cc:c9:d9:b7:8e:ae:39:dd:ca:5a:f6:8d:c6:03:09:5f:b4:
de:4e:7d:ce:66:f8:78:6e:8f:fb:83:49:06:86:2d:d2:7b:fc:
3a:24:27:a2:5a:c6:54:e9:0a:03:9a:cc:53:5b:dc:24:64:02:
56:9d:c4:c4:20:10:d9:0e:44:25:10:15:35:ed:79:ac:57:f2:
fa:06:7f:89:11:6f:f3:9b:a5:2e:e9:8a:b7:01:3a:5e:80:77:
19:ac:39:f5:fa:e8:59:55:d8:92:b0:d8:68:50:cb:f8:55:1b:
85:8f:18:a4:6a:62:15:ed:b7:bc:b6:3b:5b:76:42:5b:4d:37:
c6:92:ce:c3:e9:f4:fa:ee:32:13:e6:92:4a:84:f7:6f:00:96:
98:95:8e:27:66:2f:90:de:33:9c:af:d5:82:22:81:a3:f0:5f:
10:c6:8f:26:ef:8e:ab:a6:20:c5:c6:76:4b:be:e7:de:59:3a:
35:f6:a5:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36syUhwpo/W8gzxna15TTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzljMWI3MTcxNTZhMThhMzRkOTMyM2I2N2EwYTAzZWRh
ODVhYzkwHhcNMjUwNjI4MTkwMTQ3WhcNMjUwNjI5MTkwMTQ3WjAzMTEwLwYDVQQD
EyhjZWJjYjE3YjU1YmRiNGI5ODc4OTRjOTVmYTQ0YTBkODE2MTZhMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy57SPzXIKu57YgE0lCbAtONwH7Gj
6A/+Gt/lCdYZdfIFfSmA823rEaNje3rJK4+VxJZbaZP7rbtM1OhiCIPin2zHgLKC
9FHkoIl+ANcVjJojvFSepC0QyIjcFcHBYpTmWY6V8Q9KKpxIG6DXlKUgb46FdXjq
hA4FQDv5Gd09O82m1KB6EGQjOpfqEI0H3qDnM9StHUhJMtmaQYH032qxLwImOOBV
LsCoxTay3B45b6N6hSpOPQ4zTDJKf9rZUq86z9+Si08PYUYhohrXOyZN2hSxSND7
b9qMDvNeRgsjouZq1FrkcL2ggWsTRb6yfYFGO7ublV0wxRg5UcJYHX9qeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM68sXtVvbS5h4lMlfpEoNgWFqJIMB8GA1UdIwQY
MBaAFA3JwbcXFWoYo02TI7Z6CgPtqFrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNuQnR4Y1ZhaGlqVFpNanRub0tBLTJvV3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yY2IwZGMtZjdjMC00YjY4LTkzOTEt
ZWE3NDBlYzFkMWY2LzEvRGNuQnR4Y1ZhaGlqVFpNanRub0tBLTJvV3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yY2IwZGMtZjdjMC00YjY4LTkzOTEtZWE3NDBlYzFkMWY2
LzEvRGNuQnR4Y1ZhaGlqVFpNanRub0tBLTJvV3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADANMW75T
JBs6CRIkdPsIkF2hR1QTiGYQGmymXX3nWMNz1lcaLBPdk3uUhSFSX3VLp/a4aDUH
eUALHHhNhuP5H2Rr3GmhF6dxk8zJ2beOrjndylr2jcYDCV+03k59zmb4eG6P+4NJ
BoYt0nv8OiQnolrGVOkKA5rMU1vcJGQCVp3ExCAQ2Q5EJRAVNe15rFfy+gZ/iRFv
85ulLumKtwE6XoB3Gaw59froWVXYkrDYaFDL+FUbhY8YpGpiFe23vLY7W3ZCW003
xpLOw+n0+u4yE+aSSoT3bwCWmJWOJ2YvkN4znK/VgiKBo/BfEMaPJu+Oq6YgxcZ2
S77n3lk6Nfaluw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:45 2025 by rpki-client